About the security content of Security Update 2008-003 / Mac OS X 10.5.3 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2007-4465n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2005-3357n/a: security vulnerability
• CVE-2005-3352n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2006-3747n/a: security vulnerability
• CVE-2007-6612n/a: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2007-6388n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-6359n/a: security vulnerability
• CVE-2007-6019n/a: security vulnerability
• CVE-2007-5275n/a: Improper Input Validation
• CVE-2007-5268n/a: security vulnerability
• CVE-2007-5269n/a: Improper Input Validation
• CVE-2007-5266n/a: security vulnerability
• CVE-2007-5000n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-3847n/a: Out-of-bounds Read
• CVE-2007-1863n/a: security vulnerability
• CVE-2007-0071n/a: security vulnerability
• CVE-2008-1655Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors
• CVE-2008-1654n/a: Cross-Site Request Forgery (CSRF)
• CVE-2008-1579Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error message produced upon access to a nonexistent blog
• CVE-2008-1578The sso_util program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the command line, which allows local users to obtain sensitive information by listing the process
• CVE-2008-1580n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2008-1572n/a: security vulnerability
• CVE-2008-1576n/a: security vulnerability
• CVE-2008-1574n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2008-1571n/a: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2008-1573n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2008-1577n/a: security vulnerability
• CVE-2008-1575n/a: security vulnerability
• CVE-2008-1028n/a: Improper Input Validation
• CVE-2008-1036n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2008-1027n/a: security vulnerability
• CVE-2008-1035n/a: Improper Control of Generation of Code ('Code Injection')
• CVE-2008-1032n/a: security vulnerability
• CVE-2008-1031n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2008-1033n/a: security vulnerability
• CVE-2008-1030n/a: Improper Input Validation
• CVE-2008-1034n/a: security vulnerability
• CVE-2008-0177n/a: security vulnerability

Source and provenance

Original title: About the security content of Security Update 2008-003 / Mac OS X 10.5.3 - Apple Support. Captured 18 Oct 2026, 08:07 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.